CVE-2015-5965

The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote…

published August 11, 2015

CVSS
—
EPSS
2%
Percentile
81.3
In the wild
Unconfirmed
What it is

The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote attackers to spoof encrypted content via a crafted MAC field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02089 · 81.3th percentile
Published
2015-08-11T14:00Z
EPSS history
Timeline
  • 11 AUG 14:00Z
    The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote…
    cvelistv5